$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/igE8OJcrAgYDxROEnkKP33eakns.roa File: igE8OJcrAgYDxROEnkKP33eakns.roa (raw, json) Hash identifier: gOnm2yWy/DL7Cm5psiuOiNUHOwcCnuDREp/ilHh1Td0= Subject key identifier: 8A:01:3C:38:97:2B:02:06:03:C5:13:84:9E:42:8F:DF:77:9A:92:7B Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 49 Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/igE8OJcrAgYDxROEnkKP33eakns.roa Signing time: Mon 01 Sep 2025 01:32:12 +0000 ROA not before: Mon 01 Sep 2025 01:32:12 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 2405:25c0:ae00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 12:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 1 01:32:12 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=8A013C38972B020603C513849E428FDF779A927B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:2e:e4:81:73:c8:c9:ed:91:5e:ae:7d:a4: d1:12:5f:81:c9:bf:cf:3e:a1:a1:d3:c5:33:0c:b4: 07:37:28:a0:d5:ca:0f:c1:b3:87:1f:97:2b:0e:0d: 5d:db:e4:f4:05:d8:0b:ba:dc:c0:71:37:f5:99:49: 56:7b:11:9d:cd:d4:e8:36:7a:23:12:ca:dd:bb:f2: 7f:05:ff:c3:43:52:75:5a:ce:3b:ec:d0:18:18:6a: d3:a6:e2:28:44:27:9e:8d:10:a3:c7:01:1b:f8:d4: 73:c5:0e:25:7f:a3:62:b2:fd:da:79:8c:e2:43:ff: b5:fa:80:1e:34:3b:7e:04:f8:47:3e:6c:5b:d5:c9: 21:a2:8f:f1:71:b4:e1:6e:7f:d3:72:8b:5b:f4:99: 65:eb:9d:c4:56:78:fc:0a:16:67:e9:e8:9b:49:f7: 36:b3:d0:11:ae:94:01:bc:e6:20:90:e1:19:af:df: a0:08:48:3c:28:59:d1:ac:a5:e0:05:8d:9b:d2:f4: 53:c6:34:fe:5d:be:da:e0:84:8e:a4:03:37:d3:a0: ba:11:53:c7:9a:81:ce:4d:ed:f7:44:6e:e8:de:bc: 81:5a:4a:89:af:54:7c:0a:27:31:78:05:24:c7:e2: 60:14:da:c8:17:64:7a:ff:d8:fe:6c:8c:5d:27:04: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:01:3C:38:97:2B:02:06:03:C5:13:84:9E:42:8F:DF:77:9A:92:7B X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/igE8OJcrAgYDxROEnkKP33eakns.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 12:61:dd:5b:e3:92:f7:d2:f9:22:88:9c:93:d9:ab:69:8a:db: 4f:bd:75:e9:5b:c2:85:b2:be:3e:fb:eb:ed:14:64:1d:91:27: 2b:7d:c6:8b:9a:ae:f5:cf:ff:72:6c:25:97:0c:94:cc:f2:44: 9f:45:fc:6f:d7:6f:33:d4:ca:27:19:59:d2:ec:83:f6:4a:1b: ee:fb:1b:c9:63:c1:04:c4:2f:02:30:4b:b2:f2:f8:3f:32:b0: c3:46:c9:60:3e:b8:12:43:5c:e2:42:09:ac:00:08:ec:c0:ab: 91:4d:e5:85:84:56:85:de:a5:0a:54:51:fd:56:e9:38:85:33: 12:4e:d9:fe:a5:3b:42:2d:26:c4:64:97:4b:10:bc:d9:f6:29: b2:33:f2:0e:cf:11:01:3f:a9:f2:6b:9f:5f:f5:85:fa:01:a9: 84:5b:4d:8f:7b:4b:e9:17:1c:da:a2:92:2c:ab:02:6b:5d:f5: ce:d1:bc:35:16:fd:09:0f:b2:7d:c8:43:5c:cd:18:d9:5d:4f: b8:0e:87:c5:02:cc:2f:dc:08:84:61:06:1b:d7:c0:c7:13:b3: f8:2c:db:af:87:e5:12:76:13:f1:f6:6c:53:39:65:5e:91:b6: 05:7a:ce:43:81:0a:e5:e3:0f:7c:1a:8d:5a:c4:85:13:dd:e8: ec:b8:ca:b2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI1MDkwMTAx MzIxMloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoOEEwMTNDMzg5NzJCMDIw NjAzQzUxMzg0OUU0MjhGREY3NzlBOTI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM2lLuSBc8jJ7ZFern2k0RJfgcm/zz6hodPFMwy0BzcooNXKD8Gz hx+XKw4NXdvk9AXYC7rcwHE39ZlJVnsRnc3U6DZ6IxLK3bvyfwX/w0NSdVrOO+zQ GBhq06biKEQnno0Qo8cBG/jUc8UOJX+jYrL92nmM4kP/tfqAHjQ7fgT4Rz5sW9XJ IaKP8XG04W5/03KLW/SZZeudxFZ4/AoWZ+nom0n3NrPQEa6UAbzmIJDhGa/foAhI PChZ0ayl4AWNm9L0U8Y0/l2+2uCEjqQDN9OguhFTx5qBzk3t90Ru6N68gVpKia9U fAonMXgFJMfiYBTayBdkev/Y/myMXScEz4MCAwEAAaOCAiowggImMB0GA1UdDgQW BBSKATw4lysCBgPFE4SeQo/fd5qSezAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5L2lnRThPSmNyQWdZRHhST0Vua0tQMzNlYWtucy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBSXArjANBgkqhkiG9w0BAQsFAAOCAQEAEmHdW+OS99L5Ioick9mr aYrbT7116VvChbK+Pvvr7RRkHZEnK33Gi5qu9c//cmwllwyUzPJEn0X8b9dvM9TK JxlZ0uyD9kob7vsbyWPBBMQvAjBLsvL4PzKww0bJYD64EkNc4kIJrAAI7MCrkU3l hYRWhd6lClRR/VbpOIUzEk7Z/qU7Qi0mxGSXSxC82fYpsjPyDs8RAT+p8mufX/WF +gGphFtNj3tL6Rcc2qKSLKsCa131ztG8NRb9CQ+yfchDXM0Y2V1PuA6HxQLML9wI hGEGG9fAxxOz+Czbr4flEnYT8fZsUzllXpG2BXrOQ4EK5eMPfBqNWsSFE93o7LjK sg== -----END CERTIFICATE-----Generated at Wed Oct 8 14:01:44 2025 by rpki-client